We should use the cached artifacts in .m2 or Python virtual environment instead of downloading them both to improve performance and make sure we analyze the artifact that the end user is mostly likely using (which is very likely the cached one).
Here are the checks where we can avoid downloading the artifacts:
mcn_provenance_level_three_1
mcn_detect_malicious_metadata_1